Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NrGVOGi97WbFbogxrUl321O4RJA.roa
File: NrGVOGi97WbFbogxrUl321O4RJA.roa (raw, json)
Hash identifier: x6zvcGaTIDc0Zjm2rAsSahVnnxtilZjXlUUXfdaqZvI=
Subject key identifier: 36:B1:95:38:68:BD:ED:66:C5:6E:88:31:AD:49:77:DB:53:B8:44:90
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4D010C9147C1650D710BD809BA6D7C06
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NrGVOGi97WbFbogxrUl321O4RJA.roa
Signing time: Fri 20 Oct 2023 12:13:16 +0000
ROA not before: Fri 20 Oct 2023 12:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:01:0c:91:47:c1:65:0d:71:0b:d8:09:ba:6d:7c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 12:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36b1953868bded66c56e8831ad4977db53b84490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:b6:ae:31:1b:4b:5b:65:bf:ba:8f:2d:0e:
96:23:83:95:7b:ca:f3:5d:11:aa:93:29:2b:e3:19:
89:39:10:bc:7b:1d:e3:e7:05:f1:6e:7a:3c:97:60:
f3:a2:4a:ab:db:ee:3f:2e:86:2a:2a:e6:d0:d2:aa:
bd:e3:cc:17:24:44:51:4f:d8:12:12:68:88:8e:ef:
81:42:48:b3:09:ff:7a:b8:c9:bf:13:e3:06:12:95:
74:b6:0e:92:30:a2:29:cd:4b:99:a0:66:a9:c1:0b:
42:86:67:69:8d:c4:b7:db:a5:5f:09:60:6a:45:66:
89:a7:9e:3c:ed:79:2e:54:51:d1:b9:00:e4:fa:0b:
c4:11:72:6e:53:91:1c:a9:c4:16:9d:8b:e6:fb:4f:
08:f3:e5:b3:c4:a4:c8:4a:24:85:15:25:f0:e5:7e:
43:d5:6a:92:12:ed:5a:33:fc:85:a1:f7:a5:46:7e:
6e:71:09:82:65:72:68:e0:24:56:a6:88:90:72:30:
53:e4:ac:a2:6f:99:bb:f8:78:8f:08:66:03:4e:4f:
58:f7:1b:82:48:d1:63:7e:4e:56:be:10:ee:f7:f8:
68:05:31:94:50:7d:38:9e:27:4b:e0:66:cd:a6:b3:
2e:36:31:7a:3b:27:7a:57:60:d7:b0:a0:c4:03:6e:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:95:38:68:BD:ED:66:C5:6E:88:31:AD:49:77:DB:53:B8:44:90
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NrGVOGi97WbFbogxrUl321O4RJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:99:7f:40:4d:7e:13:b7:9b:15:99:8d:c0:a5:20:5e:5a:d2:
a2:08:d4:54:15:ce:d3:9c:c7:df:28:66:c0:80:5a:9e:b3:11:
b4:aa:f5:7a:ed:94:16:d7:34:9f:7d:40:81:42:e1:b3:1d:e3:
11:c2:ab:92:d5:a7:68:28:84:6b:22:53:be:50:1f:e6:fc:14:
a9:7f:04:f6:9f:76:0c:da:b8:2a:b5:94:d2:ac:35:80:af:c0:
6b:82:f9:ad:b5:2f:15:b7:2f:5c:f0:9b:0f:7d:68:dd:c2:b5:
d5:78:74:c3:ef:b7:b9:ba:99:06:d0:2e:0d:d0:eb:af:3b:01:
83:d5:5b:10:11:65:e2:97:65:ed:48:1b:0a:6d:08:9c:66:69:
15:85:cd:c2:17:45:c0:73:7f:cc:67:29:2a:71:96:8a:78:28:
5b:9f:12:6a:56:a2:57:89:c3:c8:06:04:f3:d2:50:50:e7:f5:
d1:8a:e3:2d:aa:30:02:d8:4f:d5:17:28:c8:3c:37:b1:e8:db:
0f:a2:f3:a1:7c:79:b5:08:f2:47:86:c3:86:4a:62:52:10:c8:
2b:66:fd:cb:a4:2f:fa:50:a1:ca:aa:d0:d9:23:89:89:2d:b2:
10:b4:2c:44:38:1c:e5:44:ca:e6:f1:6c:b2:fe:28:f4:df:07:
11:98:66:1c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtNAQyRR8FlDXEL2Am6bXwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIwMTIxMzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmIxOTUzODY4YmRlZDY2YzU2ZTg4MzFhZDQ5NzdkYjUzYjg0NDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKO2rjEbS1tlv7qPLQ6WI4OVe8rz
XRGqkykr4xmJORC8ex3j5wXxbno8l2Dzokqr2+4/LoYqKubQ0qq948wXJERRT9gS
EmiIju+BQkizCf96uMm/E+MGEpV0tg6SMKIpzUuZoGapwQtChmdpjcS326VfCWBq
RWaJp5487XkuVFHRuQDk+gvEEXJuU5EcqcQWnYvm+08I8+WzxKTISiSFFSXw5X5D
1WqSEu1aM/yFofelRn5ucQmCZXJo4CRWpoiQcjBT5Kyib5m7+HiPCGYDTk9Y9xuC
SNFjfk5WvhDu9/hoBTGUUH04nidL4GbNprMuNjF6Oyd6V2DXsKDEA25r8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDaxlThove1mxW6IMa1Jd9tTuESQMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTnJHVk9HaTk3V2JGYm9neHJVbDMyMU80UkpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIeZf0BNfhO3mxWZjcCl
IF5a0qII1FQVztOcx98oZsCAWp6zEbSq9XrtlBbXNJ99QIFC4bMd4xHCq5LVp2go
hGsiU75QH+b8FKl/BPafdgzauCq1lNKsNYCvwGuC+a21LxW3L1zwmw99aN3CtdV4
dMPvt7m6mQbQLg3Q6687AYPVWxARZeKXZe1IGwptCJxmaRWFzcIXRcBzf8xnKSpx
lop4KFufEmpWoleJw8gGBPPSUFDn9dGK4y2qMALYT9UXKMg8N7Ho2w+i86F8ebUI
8keGw4ZKYlIQyCtm/cukL/pQocqq0NkjiYktshC0LEQ4HOVEyubxbLL+KPTfBxGY
Zhw=
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:17 2025 by rpki-client